FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-39573): Apache httpd -- Multiple vulnerabilities

FreeBSD: VID-D7EFC2AD-37AF-11EF-B611-84A93843EB75 (CVE-2024-39573): Apache httpd -- Multiple vulnerabilities

Severity

4

CVSS

(AV:L/AC:M/Au:N/C:P/I:P/A:P)

Published

07/01/2024

Created

07/03/2024

Added

07/02/2024

Modified

07/02/2024

Description

Potential SSRF in mod_rewrite in Apache HTTP Server 2.4.59 and earlier allows an attacker to cause unsafe RewriteRules to unexpectedly setup URL's to be handled by mod_proxy.

Users are recommended to upgrade to version 2.4.60, which fixes this issue.

Solution(s)

• freebsd-upgrade-package-apache24

References

• CVE-2024-39573